Summary
Overview
Work History
Education
Skills
Websites
Certification
Security Clearance
Timeline
Generic

Shazil Shah

Summary

Cybersecurity professional with more than 17 years of experience in Information Technology across diverse industries. Expertise includes cybersecurity, cloud security, server infrastructure, end-user computing, and service delivery, dedicated to safeguarding organizational assets and enhancing the efficiency of IT operations.

Overview

16
16
years of professional experience
1
1
Certification

Work History

Cybersecurity and Infrastructure Manager

Museums Victoria
01.2024 - Current
  • Company Overview: Victorian State Government
  • Contribute to the development of the cyber security strategy and roadmap to guide the organization’s security efforts
  • Work with cross-functional teams to integrate security measures into IT projects and initiatives, ensuring effective implementation
  • Support the organization in achieving compliance with the ASD Essential 8, VPDSS and other applicable regulatory standards
  • Direct the development and implementation of ICT security initiatives, including access controls, vulnerability and patch management, data encryption, logging and monitoring, and hardening of operating systems and applications, among others
  • Develop and maintain thorough documentation for security policies and procedures, alongside security assessment reports and plans, to ensure consistent execution and regulatory compliance
  • Manage a diverse team of cyber security and systems engineers, fostering a culture of collaboration and continuous improvement in security practices
  • Victorian State Government

Victorian Government Associate Cybersecurity Architect

Department of Premier and Cabinet
05.2023 - 01.2024
  • Company Overview: Victorian Government
  • Create security solutions for departments and agencies within the Victorian Government
  • Provide guidance on different cybersecurity control areas for State Government agencies
  • Carry out security assessments of applications and networks to determine security requirements and evaluate processes, network designs, and access controls
  • Assist agencies in developing their cybersecurity roadmaps
  • Support departments and agencies in formulating their cybersecurity strategies
  • Work on cybersecurity remediation activities to address identified vulnerabilities and improve security posture
  • Victorian Government

Technical Lead/Architect - Cybersecurity

Cenitex
02.2022 - 05.2023
  • Company Overview: Victorian State Government
  • Designed and implemented various security solutions for State Government departments and agencies, including Privileged Access Management, Web Application Firewalls, Web Proxies and other solutions
  • Reviewed and updated Cyber Incident Response Playbooks to align with current threats and best practices
  • Created detailed network security diagrams, logical diagrams, as-built documentation, and assessment reports
  • Worked on operating system security by implementing user authentication, managing patches, and performing system hardening to enhance security and mitigate vulnerabilities
  • Victorian State Government

Senior Cloud and Security Engineer

Wesfarmers Industrial & Safety, Greencap
05.2018 - 03.2022
  • Served as a cloud migration and cybersecurity project lead
  • Planned, designed, and implemented the Microsoft Defender 365 Security Suite
  • Offered security expertise and support to technical and business project teams during project development
  • Coordinated third-party risk assessments and conducted ISO 27001 gap assessments
  • Developed policies and processes for conditional access control and Identity and Access Management in Azure

Systems Engineer/ ICT Support

CSL Ltd
11.2008 - 11.2018
  • Maintained and secured Windows and Linux servers while configuring GPOs, DNS, DHCP, and Active Directory (AD), and provided third-level support
  • Implemented firewall rules and managed web proxies to enhance network security and control internet traffic
  • Supervised team of desktop support and service desk engineers

Education

Master of Information Technology -

La Trobe University

Bachelor of Engineering - Computer Science

MJP Rohilkhand University

Skills

  • ISM
  • IRAP
  • PSPF
  • VPDSS
  • Disaster recovery planning
  • Incident management
  • IT security management
  • Cloud security

Certification

  • IRAP Assessor
  • CISSP
  • CISM
  • CRISC
  • CCSP

Security Clearance

NV2

Timeline

Cybersecurity and Infrastructure Manager

Museums Victoria
01.2024 - Current

Victorian Government Associate Cybersecurity Architect

Department of Premier and Cabinet
05.2023 - 01.2024

Technical Lead/Architect - Cybersecurity

Cenitex
02.2022 - 05.2023

Senior Cloud and Security Engineer

Wesfarmers Industrial & Safety, Greencap
05.2018 - 03.2022

Systems Engineer/ ICT Support

CSL Ltd
11.2008 - 11.2018

Bachelor of Engineering - Computer Science

MJP Rohilkhand University

Master of Information Technology -

La Trobe University
Shazil Shah